1
0
mirror of https://blitiri.com.ar/repos/chasquid synced 2025-12-23 15:37:01 +00:00

userdb: Add support for receive-only users

Some use cases, like receive-only MTAs, need domain users for receiving
emails, but have no real need for passwords since they will never use
submission.

Today, that is not supported, and those use-cases require the
administrator to come up with a password unnecessarily, adding
complexity and possibly risk.

This patch implements "receive-only users", which don't have a valid
password, thus exist for the purposes of delivering mail, but always
fail authentication.

See https://github.com/albertito/chasquid/issues/44 for more details and
rationale.

Thanks to xavierg who suggested this feature on IRC.
This commit is contained in:
Alberto Bertogli
2023-12-03 00:12:46 +00:00
parent dbff2f0455
commit 83ae4c3478
9 changed files with 213 additions and 47 deletions

View File

@@ -5,7 +5,7 @@ chasquid-util - chasquid management tool
=head1 SYNOPSIS
B<chasquid-util> [I<options>] user-add I<user@domain> [--password=I<password>]
B<chasquid-util> [I<options>] user-add I<user@domain> [--password=I<password>] [--receive_only]
B<chasquid-util> [I<options>] user-remove I<user@domain>
@@ -28,10 +28,13 @@ chasquid-util is a command-line utility for chasquid(1) operations.
=over 8
=item B<user-add> I<user@domain> [--password=I<password>]
=item B<user-add> I<user@domain> [--password=I<password>] [--receive_only]
Add a new user to the domain.
If I<--receive_only> is given, then the user will never successfully
authenticate. This is useful when creating receive-only users.
=item B<user-remove> I<user@domain>
Remove the user from the domain.